Hello,
it works fine when you specify the "sign" method. If you leave it with the
default (auto) OpenSC tricks your code to think that it supports SignRecover
and it fails.
OpenSC says that the private key supports SignRecover (CKA_SIGN_RECOVER) when
you ask it (see function pkcs15_prkey_get_a
C. Ruiz, Ivan wrote:
>The problem is clearly on OpenSC pkcs#11 implementation, but with the
option --pkcs11-sign-mode
> you have included we can workarround it!
OK... So we can close this issue.
> I agree to drop support for OpenSC. The PKCS#11 approach works well with
OpenSC and it will
> broad